VyOS 1.4 uses persistent OpenVPN interfaces.
Feed Search
Aug 29 2021
Aug 29 2021
c-po added a comment to T1683: Difficulty monitoring VyOS through SNMP.
1.3 fixed in T3779
Viacheslav added a comment to T1683: Difficulty monitoring VyOS through SNMP.
The issue may be with OpenVPN/dynamic interfaces only, without the option "persist".
In that case, if no connectivity between interfaces it tried to re-add the interface "down/up" vtunX with a new SNMP index. And it will be in the loop until connectivity will be restored with the remote site.
sempervictus added a comment to T1683: Difficulty monitoring VyOS through SNMP.
Not seeing this issue when setting "description" field - we've run it in production for years bridging our OpenStack and datacenter environments, and the names show up correctly (blanked sensitive details):
Viacheslav added a comment to T3774: atop logs are not limited in size.
How about CLI set system syslog atop file 5
That means save the latest 5 files.
erkin set Issue type to unspecified on T2620: Add ipsec peer-name to log to simplifies grepping and troubleshooting.
erkin changed Issue type from improvement to bug on T2645: Editing route-map action requires adding a new rule.
erkin renamed T2645: Editing route-map action requires adding a new rule from Editing route-map Action Requires New Rule to Editing route-map action requires adding a new rule.
erkin set Issue type to bug on T2669: DHCP-server overlapping ranges..
erkin set Issue type to feature on T2683: no dual stack in system static-host-mapping host-name .
erkin set Issue type to internal on T2719: Standardized op mode script structure.
erkin set Issue type to internal on T2721: Set FQ-CoDel as the default queueing mechanism for every class in Shaper.
erkin closed T2750: Use m4 as a template processor, a subtask of T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents, as Resolved.
A small ad hoc in-house script obviated the need for a separate preprocessor.
erkin set Issue type to internal on T2750: Use m4 as a template processor.
erkin set Issue type to bug on T2754: PBR doesn't work with VRRP.
erkin set Issue type to internal on T2755: Requirements for partial interface setup.
erkin set Issue type to feature on T2763: New SNMP resource request - SNMP over TCP.
erkin renamed T2770: Allow any character to be used in the SNMP community field from Allow to use in SNMP community all characters to Allow any character to be used in the SNMP community field.
erkin set Issue type to feature on T2773: EIGRP support for VRF.
erkin set Issue type to feature on T2798: Allow port range in tc filter.
erkin set Issue type to bug on T2838: Ethernet device names changing, multiple hw-id being added.
erkin set Issue type to bug on T2844: BGP conf_mode errors disable-send-community.
erkin set Issue type to bug on T2845: BGP conf_mode unable to delete configuration with peer-group.
erkin set Issue type to improvement on T2869: Intel ethernet driver defaults sub-optimal.
erkin set Issue type to improvement on T2892: Remove command: "set firewall options interface <interface> disable".
erkin set Issue type to feature on T2898: Support NDP proxy.
erkin set Issue type to internal on T2910: XML: generator should support override of variables.
erkin set Issue type to bug on T2911: new pppoe warnings recently.
erkin renamed T2946: Calling 'stty_size' causes show interfaces API to fail from call to commandd 'stty_size' cause show interfaces API to fail. to Calling 'stty_size' causes show interfaces API to fail.
erkin set Issue type to bug on T2947: Nat translation many-many with prefix does not map 1-1..
erkin set Issue type to bug on T3002: VRRP change on IPSec interface causes packet routing issues.
erkin set Issue type to bug on T3017: bridge will lose the tuntap member after reboots.
erkin set Issue type to improvement on T3018: Unclear behaviour when configuring vif and vif-s interfaces.
erkin renamed T3055: op-mode incorrect naming for ipsec policy-based tunnels from op-mode incorrect naming fo ipsec policy-based tunnels to op-mode incorrect naming for ipsec policy-based tunnels .
erkin set Issue type to internal on T3083: Add feature event-handler.
erkin set Issue type to bug on T3098: Cannot talk to rtnetlink: Message too long Command failed -:1.
erkin set Issue type to feature on T3132: Enable egress flow accounting.
erkin set Issue type to improvement on T3137: Let VLAN aware bridge approach the behavior of professional equipment.
erkin set Issue type to bug on T3138: ddclient improperly updated when apply rfc2136 config.
erkin set Issue type to infrastructure on T3157: salt-minion fails to start due to permission error accessing /root/.salt/minion.log.
erkin set Issue type to bug on T3163: ethernet ring-buffer can be set with an invalid value.
erkin set Issue type to internal on T3165: Split node.def generation process into "generic" and "specific" stages.
c-po moved T3783: "set protocols isis spf-delay-ietf" is not working from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3783: "set protocols isis spf-delay-ietf" is not working from Open to Finished on the VyOS 1.4 Sagitta board.
c-po added projects to T3783: "set protocols isis spf-delay-ietf" is not working: test, VyOS 1.3 Equuleus.
c-po changed the status of T3783: "set protocols isis spf-delay-ietf" is not working from Open to In progress.
c-po added a comment to T3662: Container configuration upgrade destroys system.
Reproducible on my side, too.
c-po changed the status of T3662: Container configuration upgrade destroys system from Open to Confirmed.
Aug 28 2021
Aug 28 2021
chaispaquichui added a comment to T3783: "set protocols isis spf-delay-ietf" is not working.
To fix the bug :
chaispaquichui updated the task description for T3783: "set protocols isis spf-delay-ietf" is not working.
chaispaquichui updated the task description for T3783: "set protocols isis spf-delay-ietf" is not working.
c-po added a comment to T3743: l2tp doesn't work after reboot if outside-address not 0.0.0.0.
Aug 27 2021
Aug 27 2021
c-po changed the status of T3778: Abnormal network communication and settings from Open to Needs testing.
c-po closed T3568: Add XML for firewall conf-mode, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
c-po added a project to T2251: VRF communication breaks when utilizing zone-based firewalling: VyOS 1.4 Sagitta.
jack9603301 updated the task description for T3778: Abnormal network communication and settings.
sempervictus added a comment to T3692: VyOS build failing due to repo.saltstack.com.
Once i dropped that repo everything started to work again... and while it may be a temporary thing, i think that this sort of illustrates the problem with reliance on external repos. Its probably safer to mirror their content into something that can be relied upon to stay live as companies are bought and sold all the time, resources vanish, and licenses change from real FOSS to semi-permissive .
c-po added a comment to T3692: VyOS build failing due to repo.saltstack.com.
I can not reproduce the issue for 1.4 and 1.3 release. Maybe a temporary image build issue with the upstream repositories.
c-po moved T2108: Use minisign/signify instead of GPG for release signing from In Progress to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
c-po moved T2108: Use minisign/signify instead of GPG for release signing from In Progress to Finished on the VyOS 1.3 Equuleus board.
syncer changed the subtype of T3692: VyOS build failing due to repo.saltstack.com from "Task" to "Bug".
c-po moved T3182: Main blocker Task for FRR 7.4/7.5 series update from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3182: Main blocker Task for FRR 7.4/7.5 series update from Backlog to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.140 / 5.10.58 to Update Linux Kernel to v5.4.143 / 5.10.61.
Aug 26 2021
Aug 26 2021
c-po changed the status of T3780: VTI not being brought down when tunnel is down from Open to Needs testing.
c-po moved T3780: VTI not being brought down when tunnel is down from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T2108: Use minisign/signify instead of GPG for release signing from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.9) board.
c-po moved T2108: Use minisign/signify instead of GPG for release signing from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T2108: Use minisign/signify instead of GPG for release signing from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T2108: Use minisign/signify instead of GPG for release signing from Open to Needs testing.
c-po closed T3781: Revert the NAT implementation in 1.3 back to iptables, a subtask of T2947: Nat translation many-many with prefix does not map 1-1., as Resolved.
c-po added a comment to T2108: Use minisign/signify instead of GPG for release signing.
dmbaturin added a comment to T2108: Use minisign/signify instead of GPG for release signing.
Now the last part left is to add minisign signature verification to the add system image script. For now, we should keep the old GPG verification code just in case someone wants to downgrade, or if we have to re-introduce GPG signatures for whatever reason.
c-po added a comment to T3780: VTI not being brought down when tunnel is down.
Thanks for the PR!
krox2 added a comment to T3780: VTI not being brought down when tunnel is down.
rhn added a comment to T3754: Make config scripts more testable.
Bump - is anyone interested in reviewing this or at least discussing direction? It's difficult to contribute to stalled projects.
Aug 25 2021
Aug 25 2021
kroy added a comment to T3748: Container deletion bug.
I found a new and exciting way to break it though. And maybe what we were talking about in Slack will be able to correct some of this.
kroy added a comment to T3748: Container deletion bug.
Looks good to me now